Remote code execution

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...

CVE-2016-9369

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...

CVE-2016-8350

CVE-2016-8350 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Moxa ioLogik E1200 and E2200 series devices. The issue lies in the web application failing to verify that requests originate from a valid user, enabling remote attackers to perform unauthorized operations. Affected firmw...

Updated Firmware Due for Serious TP-Link Router Vulnerabilities

Chinese router maker TP-Link is wrestling with the disclosure of a handful of vulnerabilities in its C2 and C20i routers. The most severe of the flaws lead to remote code execution on a device; the attack, however, would require an attacker first obtain valid credentials. Researcher Pierre Kim...

JUNG Smart Visu Server Multiple Vulnerabilities

Exploit for hardware platform in category local exploits title: Path Traversal, Backdoor accounts & KNX group address password bypass product: JUNG Smart Visu Server vulnerable version: Firmware v1.0.804/1.0.830/1.0.832 fixed version: Firmware v1.0.900 CVE number: - impact: Critical homepage:...

SHDesigns Resident Download Manager does not authenticate firmware downloads

Overview SHDesigns' Resident Download Manager as well as the Ethernet Download Manager does not authenticate firmware downloads before executing code and deploying them to devices. Description CWE-494: Download of Code Without Integrity Check- CVE-2016-6567SHDesigns' Resident Download Manager...

Check If Your Netgear Router is also Vulnerable to this Password Bypass Flaw

Again bad news for consumers with Netgear routers: Netgear routers hit by another serious security vulnerability, but this time more than two dozens router models are affected. Security researchers from Trustwave are warning of a new authentication vulnerability in at least 31 models of Netgear...

DOM-Based Cross-Site Scripting Vulnerability in the Advanced Management Module (AMM) - Lenovo Support US

No description provided...

Intel® Ethernet Controller X710/XL710 NVM Denial of Service Vulnerability - Lenovo Support US

No description provided...

About the security content of AirPort Base Station Firmware Update 7.6.7 and 7.7.7 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

Information about LenovoEMC devices may be disclosed if the device has an Internet-accessible management interface - Lenovo Support US

No description provided...

Information about LenovoEMC devices may be disclosed if the device has an Internet-accessible management interface

Lenovo Security Advisory: LEN-3846 Potential Impact: Disclosure of information about device Severity:Low Summary: An unauthenticated user may be able to view device information about the LenovoEMC device if the management interface accessible over the internet. Even with this vunerability, no dat...

Smile! Hackers Can Remotely Access Your Samsung SmartCam Security Cameras

It's not necessary to break into your computer or smartphone to spy on you. Today all devices in our home are becoming more connected to networks than ever to make our lives easy. But what's worrisome is that these connected devices can be turned against us, anytime, due to lack of stringent...

Siemens Patches Insufficient Entropy Vulnerability in ICS Systems

German industrial giant Siemens has provided a firmware update addressing vulnerabilities that are found in a popular line of its Desigo PX industrial control hardware used in controlling primarily HVAC systems in commercial buildings . On Wednesday, Siemens, in coordination with ICS-CERT, issued...

Mutiple SONY Videoconference Systems do not properly perform authentication

Overview Multiple SONY Videoconference Systems have a default user account which does not require authentication to login to a device CWE-306. This user account has a privilege to view some of the system configuration files. As a result, the device may be manipulated by an attacker with...

JVN#42070907: Multiple SONY Videoconference Systems do not properly perform authentication

Multiple SONY Videoconference Systems have a default user account which does not require authentication to login to a device CWE-306. This user account has a privilege to view some of the system configuration files. As a result, the device may be manipulated by an attacker with administrative...

Moxa MiiNePort Multiple Vulnerabilities (Dec 2016)

Moxa MiiNePort is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:moxa:miineport"; if...

Sony IPELA Engine IP Cameras Backdoor Vulnerability (Dec 2016)

Sony IPELA Engine IP Camera devices are prone to a backdoor vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Multiple Netgear routers are vulnerable to arbitrary command injection

Overview Netgear R6250, R6400, R6700, R6900, R7000, R7100LG, R7300DST, R7900, R8000, D6220, and D6400 routers and possibly other models are vulnerable to arbitrary command injection. Description CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection' , CWE-306:...

Tesla Motors Gateway ECU Command Injection Vulnerability

The Tesla Motors Gateway ECU is a set of firmware used to manage the car and provide driving functions. A security vulnerability in the Tesla Motors Gateway ECU firmware handling updates allows remote attackers to exploit the vulnerability to submit malicious updates that inject arbitrary command...